Trust & security
Standards touch everything you know about your own operation
So we are specific about what we do with them, who can see them, and where the line sits between mapping a rule and giving legal advice.
Human in the loop, always
Nothing reaches a station before a named person validates it. Aisop answers only from those approved standards, cites the version it used, and says when it does not know rather than guessing.
Your standards and data stay yours
Standards are written for your operation, stored on your behalf and exportable at any time. We do not resell standards, benchmark your operation against competitors, or use your SOPs to train public models.
Access follows your roles
Crew see the station standards for their stations. Managers see the review queue and Standard Score. Group and franchise administrators see rollups. Lead data on this site is visible only to SOPhero administrators.
Regulation mapped, not legal advice
SOPhero turns rules into operating steps. It is not legal advice. We name the regulator and the dated obligation for each market, then turn it into an operating step. Your counsel and the regulator remain the authority.
Consent and data protection
Consent wording is per market, not per template
Every lead form on this site records the exact consent text shown, the law it relates to, and a timestamp. You can ask us to delete your enquiry data at any time, and analytics cookies only measure pages for people who accept them.
Singapore
PDPA (Singapore)
I agree that SOPhero may store and use the details I submit to contact me about my enquiry, in line with Singapore’s PDPA. SOPhero will not sell my data and I can ask for it to be deleted at any time.
Malaysia
PDPA (Malaysia)
I agree that SOPhero may store and use the details I submit to contact me about my enquiry, in line with Malaysia’s PDPA (Act 709, as amended 2025). I can ask for my data to be deleted at any time.
What we will never do
Four lines we will not cross
- Publish a standard that no human has validated.
- Let Aisop answer from anything other than your approved SOPs.
- Sell, share or benchmark your standards and operating data.
- Present mapping regulation as legal advice, or a pilot result as a proven outcome.
We are at the founding pilot stage. Where something is not yet proven, we say so, and we never present illustrative models as results.
Security posture
Access is role-based and least-privilege, lead data is readable only by SOPhero administrators, and standards are versioned with the validator recorded. For Singapore-based operators we work to the CSA Cyber Essentials baseline; where a group needs a data processing agreement, we sign one.
Report a security concern or a data request to hello@sophero.io and we will respond within one working day.
Talk to a human
Ask the awkward questions
Data handling, market packs, what happens if we stop. We would rather answer them before you buy than after.
SOPhero turns rules into operating steps. It is not legal advice.